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[Scope of Claims for Patent] 
[Claim 1] 

A distributed denial of service attack preventing 
10 method, wherein 

in a network system including a network consisting of 
a plurality of communication devices connected with each 
other in a mesh, a computer and a LAN to be protected, and 
a gate device which is inserted between the LAN and the 
15 network, 

the gate device, when a suspicious offensive traffic 
is detected from an input communication traffic, executes 
processing of calculating, based on a transmission band 
limit value of the suspicious offensive traffic in the 

20 corresponding gate device and the number of communication 
devices in one-level-upstream of the corresponding gate 
device, a transmission band limit value of the suspicious 
offensive traffic to be notified to the upstream 
communication devices, and transmitting a calculation 

25 result to the upstream communication devices, 

the communication device executes processing of 
limiting a transmission band of the suspicious offensive 
traffic to the transmission band limit value received from 
the downstream gate device or communication device, 

30 calculating, based on the received transmission band limit 
value and the number of communication devices in one-level- 
upstream of the corresponding communication device, a 
transmission band limit value of the suspicious offensive 
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traffic to be notified to the upstream communication 
devices, and transmitting the calculation result to the 
upstream communication devices, 

the communication device further executes recursive 
5 processing of limiting the transmission band of a 
suspicious offensive packet, and transmitting the 
transmission band limit value of the suspicious offensive 
traffic until reaching the uppermost communication device 
serving as a sending end of the suspicious offensive packet, 
10 the gate device executes processing of transmitting a 

guery of an average input transmission band of the 
suspicious offensive traffic to the upstream communication 
device , 

the upstream communication device executes processing 

15 of receiving the query of the average input transmission 
band of the suspicious offensive traffic from the 
downstream gate device or communication device, and 
transmitting an average input transmission band value of 
the suspicious offensive traffic in the corresponding 

20 communication device to the downstream gate device or 
communication device , 

the gate device executes processing of calculating, 
based on a transmission band limit adjusted value of the 
suspicious offensive traffic in the corresponding gate 

25 device and the average input transmission band value of the 
suspicious offensive traffic received from the upstream 
communication device, a transmission band limit adjusted 
value of the suspicious offensive traffic to be notified to 
the upstream communication device, and transmitting the 

30 calculation result to the upstream communication device, 
the communication device executes processing of 
limiting the transmission band of the suspicious offensive 
traffic to the transmission band limit adjusted value 
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received from the downstream gate device or communication 
device, and transmitting a query of the average input 
transmission band of the suspicious offensive traffic to 

the upstream communication device, and further executes 

5 processing of calculating, based on the transmission band 
limit adjusted value received from the downstream 
communication device and the average input transmission 
band value of the suspicious offensive traffic received 
from the upstream communication device, a transmission band 

10 limit adjusted value of the suspicious offensive traffic to 
be notified to the upstream communication device, and 
transmitting the calculation result to the upstream 
communication device, and 

the communication device further executes recursive 

15 processing of limiting the transmission band of the 

suspicious offensive packet to the transmission band limit 
adjusted value, and transmitting the transmission band 
limit adjusted value • of the suspicious offensive traffic 
until reaching the uppermost communication device serving 

20 as the sending end of the suspicious offensive packet. 

[Brief Description of Drawings] 

[Fig. 1] A structural view of a network to which an 
embodiment of the present invention can be applied. 
25 [Fig. 2] An example of setting conditions for detecting 
suspicious attacks according to the embodiment. 
[Fig. 3] An example of setting conditions for detecting 
illegal traffics according to the embodiment. 

[Fig. 4] A model of band control included in a gate device 
30 2001 and communication devices 2002 to 2006 according to 
the embodiment . 

[Fig. 5] A classification algorism in a filter 2021 
according to the embodiment. 
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[Fig. 6] A flowchart of an operation of the gate device 
2001 according to the embodiment when a suspicious 
offensive packet is detected. 

[Fig. 7] An example of calculation of a transmission band 
5 limit value in the configuration shown in Fig. of the 
embodiment . 

[Fig. 8] A flowchart of an operation of the communication 
devices 2002 and 2003 according to the embodiment when 
receiving a transmission band limiting instruction. 

10 [Fig. 9] A flowchart of an operation of the gate device 
2001 and the communication devices 2002 to 2006 according 
to the embodiment when an illegal traffic is detected. 
[Fig. 10] An example of calculation of a transmission band 
limit adjusted value in the configuration shown in Fig. of 

15 the embodiment. 

[Fig. 11] A flowchart of an operation of adjusting the 
transmission band limit value performed by the gate device 
2001 and the communication devices 2002 to 2006 according 
to the embodiment. 
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016) , AT&T%ht^^C (R.Mahajan, S. M. Bel lovin, 

S.Floyd, J. loannidis, V. Paxson and S. Shenker: "Co 
ntrolling high bandwidth aggregates in the network 

- extended version" (2001)) , I D I P (Intruder 
30 Detection and Isolation Protocol) (D. Schnackenber 
g r K. Djahandari and D.Sterne: "Infrastructure for 

intrusion detection and response" , Proceedings o 
f the DARPA Information Survivability Conference a 
nd Expos it ion(DISCEX), South Caro I i na (2000) ) t£ ¥ 
a*fc* 0 AT&Ttt^WI D I Ptt, #*tfcfc£K-< 

>b&&mm&<o±.ffi/— K^e*u, ±^/-kt*>e 

*-*^&W)l>XZtc.&mM/<lry b? -ifrZVXf-? 
n^^^li, HDD o Sft^f h^bt- 

[0 0 0 5] 

[*MdSl»ftLJ: 5 ^-T^I^JIi] Center Tra 
50 *«>?fi[»«:l6«!-*-5-i:tt-e*ftv\ ^JDx.T. a»ffljgf 



(7) 



JJ 

[0 0 0 6] Sfc, C©ffii(OKHBMt«iia«»*(0 
I D I PtC^TJi. JfC&'<fry ht&&£tlti'<*v h 

[0 0 0 7] ±fB¥«&%JtLTfc£;h,fct> 
[0 0 0 8] 

BLAN*3j;TJ**;y hy— ^<©IHI^Jf Sttfcy- 
«<0lo±j«K:fc£a«««»£*£tt:. JijffioflrlBa. 

ea#««n»«[icwi«i--6t*ic, iMBSflTLfceai* 



/o 



20 



30 



40 



<&§§2 003-283555 
72 

ifciiamKa^HHtrsas&fT^ ffins^-hsu 

e^^JPSH^ffl t > StrE±«ttoa«KB^^ bSft L 

(Dfemm&fflmm&w&nm LTWiB±stoa«^«-- 

d^sit L^miBea6#«*jRR«iaEffl[jcS!jis-f-5 1 * 
ic, ffina±»fE(oa««ii^«riB*»*» h7t^^o? 

A^ess**^**^ ±atoa«S6«^a»i-s«r 
flaiEiSKoawaea^iSW-rsAQfaairSrtTvv sasa** 

[0 00 9] W*« 2 IdlBttoSS^tt, W*« l KB* 

««»J!«ffltt, y- hS«*fcl*a«2K«dsy- 
A^fpJ* yT"! lc#St5^Sr^tPgIO^$ ^ d , IrI 
d Cfc^ty- httBSfcttattKBfrMUiJ-t- 

u «s dicks i -ewsijstusy-hasB* 

s(d.i), g££dlc*>3 i-CW3'J*tb*y— 

nmmmmco 1 o±«E^fosa«K«»*:nu(d f i) , m 
$ dtc$>^, i t«^ti5^ has«*fctta«ssia<o 

loJia(-*>sa«3S«Sr»SUi-5fcJ?)CC>S-8-«rk % ffi 
$ d {^^5 i "CKSUSttsy- h3£«*^«afS3SBo 

1 ojbi*K:*>5 k T*»sij$tu5a«3Sia<o?fc*stt h 7 

t^oeiS*««ISItS:S s (d+1, i,k)i:i-Sfc. 
[»11] 

1 

Ss 



Ss 



(d+l,r,k) 



Cd.O 



<d.U 



[0 0 10] W*3l3»c!BttO»Mtt, »*Jtl*fctt 
«taitaS««rllWJi-6«»* i> d l^fcS i T'i^S'J 

^n&y- h3SB*^ttafss«^*sa^>'y ^ 

50 fi%*«IHS«t«rS s ' (d, i), dtcife^ i T*»J 
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mwgt&nute. ih g§£ d|c£>5 i -CBWJSixsy- h 

5fc#>cD#^£rk. Si£ d£fc« i -CWSUSixSy— h 
^M^/c^iifi^go l oJLSSlC&S k -CHWJSftSa 

B(d+1 f i.kh Si£dlc:£>£ i-CWJiJ**tS 

ffi£:S s ' (d+1. i.k) ttSt, 
[ftl 2] 

B (d+i.i,k> 

Ss' 



(d+l.i.k) 



nu 



Ss : 



«+ 1.1.0 



<d,i) 



[ooii] l»**4icia«<o»Wtt, «2&coa{f<gB 
h*fioio±«fcfcaa«»B*£*S^ JLStojKr 

E±«E<^a<f KiK^neft*8ft h7t^ co^a^ 

h7t y^^sp*&A*ea6«r««i:SrK^ _L«oa« 

[0 0 12] |»*«5^|Ett<03SMtt. »#3j4fclE« 
^-hSItfcot, RfriB*«MRtt«^«», mils 
C&4IH£fHRlit«r* h3£B*fclia{t3£fiasy- h 

raj-T5##^r i , d(c&>5 i T-aaiJStL*^- h 

ffl«rS s (d, ih m$ d lc£>6 i -e»«U*nsy— 
fi*fcfiii«3Sfi<o l oJi8ffi^fe5al«Kfi»«rnu(d f 
ih i££dfCifo£ i -C»«iJ$tb5y— hSB^fcHiift 



30 



/4 



gF7t y^oea#«#jKffl[Srs s (d+i. i,k) t~rz> 

[tl3] 

1 

Ss. 



(d+1, i.k) 



nu 



(d.U 



Ss 



(d.U 



fiJ*!x7 f ilc:#iE"r5^Sr^-r»JBoai*&'d, Ir) — co 
i££ dtc+6i^T^— hagB*fettilfg»BSr»Sy-r-6# 
i > fliSdJcfcS i -cWSU^tL-sy— hSSfi^^irt: 
a«*B^**Mi/<*y h^M»Sf$:S s ' 

(d, i). mts dicfes i -rnausixsy— h«B**:tt 

ii«SSB<Olo±a£Jcfc6ii«$gfi»^nu(d f i), i££ 
dKifcS i -C»SiJ$ttSy- F^S£fcl3:a<l=£@co 1 
o±^cfe^ii«^fi^»sij-t--5fci?)co#-^$rk, 2££ 
20 dtcfcS i -CBWJSJxSy- hSBSfcttafi^fico l 
o±MI- fc5k -CHUS'J $ aft SBd* «b a*p * nfc# 
F7t^ <0^*SlA*eiS#«ffiSr B (d+1 , i , 

kh dtc&s i -emmztiz?— hmm^tinmin 

Sh7t^ Ofi%*««0H«IStt«r S s ' (d+1 . i . k) 

mi 4] 

B (d+l.i,k) 



Ss' 



(d+l,i,k) 



nu 



(d.i ) 

2 B 
1=1 



(d,i) 



(d+l.i.i) 



[0 0 13] W#^6K!Ett035WW\ B6»*f*-e*>5 

Sttfc^y hi? — ^oy— K«:»fifei-Sifi{taSB^^:*5V^ 
T^coy- ha6B*>5VMiii«»fi^P>5S:*Sg| h 
7t^ o££»«ftiJRffiSrXfflr fltriE**S» h 7 

ty? ofiai»«s:t(riaeiS*«ffifjRffiic:*jR-rs*« 

fMRB«r#aLT±*oaii*B^a6«^*«*«MR» 

WIE5Sc*«Si h7t^ 05F*SA*e5S»«Bgv^^ 
?rS:{f SttaAatBlc«3it^mE%*S)R h7 fc s/ 
^OV*&A*ea»««[*rWIBT««)y— h=£@£>-5^ 

h36fl*>6v^^ia«aSB*»bftSSS*a t y^co^ 
50 ffttMHMSttfrSfB ft9IS?fe*SSi h7ty^co6 
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^ ¥*s> a* £ ^ esi#tt«t sw^a 

*r ££#«£^*a«3£JB"C*>S 0 
wUfSI-Cfcot, ll&E#«fBR«^»«\ litrEfi 

1^— d l^joV^T^- hKB£fctta«3£ll£I»B'J 

S s (d, iK mt$ 6\Z&>Z> i -CBRgrj^ttSy— h§£B£ 

it&mmmm<D i o±«Ltc£>sa{f kbr smu (d, o % 

m$ d tcfcS i -eHESUSixsy- H6«*fcfia«K« 
(7) 1 o±aEJc*>-5a«»««r«S»Ji-5fc*^#-S-* k % 
i££ d \zhZ> i -CWBUStLS^- h^BS/cteaff £iB 

o i o±ffctc£>5 k-cwiusttsam k 

7t -/ ? 0G%*tt»JR1tt«r S s (d+i, i,k) ttSfc, 
1^15] 

1 



Ss 



(d+l,i,k) 



nu 



Ss 



(d.i) 



(d.i) 



WSEffiSr. hSS«**:Wta«««3ftS^— h»«3&»& 

d ^v^ry- hKusfcttaftasitfcMWJ-t-s* 

i , d l^&S i T'gaSiJ^tb^y- h^g^fcii 

(d, d i r-»»j$tb-5^— h^e^fcji 
a«asB<oio±jKic*>5afflrfi«»«rnu(d. o, 
d\c£>z i -ewsijsn*^- h^B^fcteaffgEBo i 

o±«d{c£>5 k "ClRSUStbSawaSBd^a^PSixfc* 

hn^ © WA*eai* b (d+i , i . 
k). issdnfcs i -easijstt^-y— h«n*fcj±a« 

^®co i o_h^c£>5 k T-8KU$ixsa««lloft*S 
»h7ty^ afii£*ttMHR!Stt«: S s ' (d+1, i, k) 

[ftl 6] 



76 



B (d+i,i.k) 



Ss' 



2 B (d+i i 



(d,o 



1-1 



(d+l.U) 



[0 0 15] »*«8lclBtt^»Wii, coining 
jo gl±-eHtT$^=»yfa-^yD/7AT-feot, 

ifc££&c, ±»<D«if5a«fi«^a*p-rsatiis?fe*« 
ii h ^ t -x * ^>eai»«fBiisffi*iittti ur±aEroa«« 
i^m^f^/t, S9iE±sR<oa«»K— rntaa: 
h7t-^ <o5p«A*ea6«r«srBg-fr-&*is«i- 
z>*T*yyt, «riBJbflc<oa«fi«^b«rfB3:*Sft h 

#«S'JPfiW«ffl[^. «rl5±«E«oa«36«3&^Sftb^:«r 
E#*S» F7t-^ ©WSA*fiiSff*« i £SK, 
±*<oa«3S«^a»i-*«HER»*J(l h7ty^^fi 
£*ttMRMSfiK«r*tt LTW1B±flt<oa«351t— 3MB 

[0 0 16] W#Jg9Kre«to3S0itt, BSW»ftt»*>* 
S*LSfc*y h!7-^<D/- KSr«rici-5a«l6«±T? 

- hK«xttaflH*«36»ba»*nh7t y^oest 

Lfceasffi?«s9Rffit. ^Rifigioio±iicfc§ 
aft^B^^^stc, ±«Eo«riEa(ts«^a*P"rsw 
E*»««h9ty^oeas»«iWR«*»wu-c. jt 
RoawKit^asflr-rs^^y^fc, ttjisT^coy- h 

^^1$ h7t^ o^*SA*ea6*«ffi*flfrETSK«oy 

co^- h«Bxtta«»B^e>eaiffi?«wjR«»ffl[S:s 

B^«rlBa»»* h 7 t: y ^ (05p*SA*fe2l**«:ra^ 

F7t7^ o^A*eiS«F«fl[*:S«-r 5 * 

50 f^i, «lESfSb*:eiS»«SWRlH»«i:, WE± 
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^jjfcmmmmt&mi^ jb^oam^ft^aso-rs 

[0 0 17] IS*^l OlcEttoSSWWU f»**8*fc 
ttfll*S 9 lcEtt<o$MR3!'tf— tr* 5Ffg?fe*BSJh y p ^ 

*fctt»«*«*MMrs»»*r i , 2££ dlc£>£ i r* 

h<Ofii»«*WJIB«S:S s (d, IK «Sd«c*>6 i-CIR 

«»«*«:nu(d, ih SSdlcfc* i -caSU^tLSy- 
h^M^fcteaff^goioi^lc&eam^ 

mm sioftsts h7t^ oeattttMKMtfr s s 

(d+1, i.k) 
[S17] 

1 

g — _ 



18 



(d+I.i.Jc) 



nu 



(d.i) 



Ss 



(d.i) 



ici: «9^tB^tb, ffiEfia£tt$«jR«aMKtt* y-h§£ 
tcamm^s^y— h mm** yz?m ic&i£-t 

h««*fcW:a{MSB*:aWJi-5##«r i . dtdfc 

5 i -CS^iJ^tt^y- httB££ttafBKB0%*8IE 

(d, i) N Bundle*? 

6 i -CKWJSJxS^- hStl«^»afBKlKo i o±«£ 
JcfcaafS3Sll»4rnu(d, ih 81$ dtcfc* i -CRMS 

«§r«SiJi-Sfc«)(0*-§-S:k, Si* dlcfc* i TiRBU* 

nsy- h£B*fcMta«KB<*> i o±Mtc$>5 k -cm 
J3ij*nsafssiad^a*i*nfe?sc*s» s ^ t * ^ o 

kTKVJdJxsaftKBOftRSR h7t v9<DB3m 
rffiSrS s ' (d+1 f i r k)^«^ 

18] 

B (d+i.i.w 



Ss' 



(d+l.i.k) 



= nu 



(d.i> 

2 B 

3=1 



Ss Vi> 



(d+l,U) 



[0018] ffljftag i l KE*oS£9ltt:. it^Illi 



5 3 > b- - ^ & £ l a n t <o m ^ rfr » £ tvfc y - 

^Wiilf h7ty^$rfx^^U tr^^F 
!6«*o***8 h 7 t y ^ SrttB Lfca^lc, ^g*y 

a«Ey-h*Boio±j«icfcsa«ig«»t 
Srgic. ±«£©ffliaait««^aJai-rs«nB**stth 
7 1 * * oeasw««ijKfli[Sr3mi it ji^oaftss- 

"r y^fb, «flB±«E^a«Sia*^S(rf5?fe**Kh7 t 

y- h«s^*3»t ^ wiB«*«a F7t.^ oe^si 

MRflUMK** «9ta-h8ftoa«36fi^bg«UfcS(iK?k: 

<omm ^B^ajEP-r a «fe#**r h7t^^ oe^f 

KMRHRIIfrlltU UTWEiSiEoaif *B^ai« -r 5 

— tr^^ffi3R*BSjh^o y 7 ASrlESr 5 - £ 
»fci-*ER«M*-e*5. 

[001 9 ] 1 2 \cmffi(D$£Wte. B5»*f*T*> 

H fr £ 6 = >- tf a. — ^ 7* n y 7 ^ ^ |S & b =i is tr a. 

St*MR«i, Sttaflr36BoioJi«lcfcsaft3S 

g^^^^ic, ±«o«fiBaft»B— a^ii--5gtri5** 

t y^oe5S*«»JKffiSr»WLT, _b«coa 

ttaftasfi^&a»*jiih7t 2/^o3pjftA*ea»« 
h7ty^ <o5p*&A*eas*«ffl[S:«riETatoy— 

h^BXttaWSfid^eai^WMISWSffiSrSft u> 

WSffitcf&JPfii-s^xy^i:, «reJb«Efl>a«SSB^«l 
I5***» h7 t y^O^A*e^»«^B8^*a6 
{fi-^^x^^^r. 8trE±SfE(oa«3SBd»bfltlE«*« 

ah7t y ^603p*&A*eas#«ffl[^gfti-5^7 % 
e«#««tfc*r»^ ±atoa«asB— a^-rswES: 
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[0020] it** 1 3 {^mcommn. it hi 

«»JRffl«rS s (d. i). »Sdlcfc« i-e«»J**tsy 
nu(d, iK i££dtc£>£ iT»»ISnS^h81*fc 
#-§-£k N «S d*c*>5 i "CWSiJStt^y- 
#S£^|i§ h?t^ <oei£#«SJIKffi& S s (d+l ,i,k) 
[S19] 

1 

Ss, 



20 



(d+i.i,k) 



nu 



(d.i> 



Ss 



<d,i) 



h»«*fcttiiflrafilt*rlia«-t-5«#Sr i . i££ d (cfc 
5 i ■C«UMS*tS^- h»«*fctta««B©*»** 
/^^ogM^SISrSs' (d. ih tSiSdl^fc 
5 i -eWS«*ix«^— hK«*rt:tt:a«3£«o iol« 
lCfcSa«S«»£nu(d, iK BiiSdlCifcS i t?«ffliJS 

nay- i o±^(cfc^ii{f ^ 

ti^y- h^g^fcjiait se^ i o±sc(c&5 k -e« 

spi»7^ieiSS#*«[SrB(d+l, i,k), d i "C 

k -CW3iJ$tt6afB9SB^%S«K h 9 t 3/ * ofi^^F 
^^Jfsm^^fit^rS s ' (d+i,i f k)it5i, 
[^20] 

B (d+i,i,k) 

Ss' 



(d+l.i.k> 



nu 



<di) 



Ss 



^ B (d+i,i,D 



(d.i) 



[0021] 

t\ 2000121*— 2001 n^cDzzwcD—'mmm 



iicj:6y-hgi (y-h?^>n x 2002-20 

x 2 0 0 7-2 0 l0|j:^git^6 o DDoS 
T&W<DW&^^<Dy-— 2 0 0 0ri*!lX^£*xT^<5LA 

0 1 \Z£oXMft<D*v hXP — ^^C^$i^-CV^5o * 
LT, H7-^«I{|^12 0 0 2, 2 0 0 3, 2 

0 04, 2 0 0 5. 20 0 6^tTV^o DDoS^C 
CJ:otI^$^«^gi2 0 0 7, 2 00 8 
70 3^ ^m^^T y V 2 0 0 0 Idft^o 

■caHrj-s*. w/^y h^aswte*LANic* 

ESWtO«2 0 0 9, 2 0 1 0rf»<b1f— ^2 0 0 

0 z ft < * 5 £ v * 0 a c s Q 

[0 0 2 2] 20 0 111 'T'ib-y— '< 200 

U^5, H2|:SW*«ttl*ttwRS(D««:*t. 

y-^l2 0 0 1lt WMft(Of^2 0 
20 0 0 Rt;t- '*2 0 0 O^t^tlTV^LANOM 

So 

[0023] m 2 icfeits%»#Ktftttft#tt. ^dbM 
«e>tc«i:±ffifflstts. s«'*y 

StSBSKSttSo «tt5*tt*i, IP/^s/hOS3/4 

t£-C&>3 I P(D fDestination IP Address (£55*5 I P7 
K^) j kv^5*tt«BUtt*&i B »)tSn6. 12 (ciio 
Pts 1 OU=i— K^ttttJJRttH TDestination 

IP Address M5fe I P7 KW^) J ^ h92. 168. 1 . 1/3 
2J (dst=192. 168. 1. 1/32) % IP<D±{iJf 

41) O^n hnyW^J^^i- Tprotocol (^n h => 
/1-) J ^ TTC PJ "C$> ^ (Protocol=TCP) , d^o, % 

TDesti nation Port (£E$fc*N- h#-§*) J ^ f8 0j 

(Port=80) tv^5JGitt^J4:^n^Ji^fco*i-e 

ti^^n^o ##2£>U=i— K»m*tttt, TDestinat 
ion IP Address (£a$fc 1 P7KM J Tl92. 168. 1. 
2/32J T'^t) (dst=192. 168. 1. 2/32) , 7&^o % Tprotoc 

01 (^n h^yi^) j TUDP (User Datagram protoc 
ol) J T*&5 (Protocol=UDP) i V>5 JW4«EU£-t*Uk 

Mt4(i. TOestination IP Address (^55fe I P7 K U 
50 ^) J ^ r 192. 168. 1.0/24 J -C*>S«f4a«'J^ -tOjRtt 
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ffi-CJBSSitSo «ai«ffill K"C*B^*tt 

[0 0 2 4] y-hKB2 0 0 i&tKlAKB2 

0 0 2-2 0 0 611 7 b<Ob7^7^^ 

WDo S^<Dm%L<D b 7 t y*'** — ^a»*>«J« 

5i:WJfc£*L<5o B3©»fl0^3Eh7ty^*tt 
H r^ail«F«T 1Kbps £Ub0V*4r yh^Sl »£A 
±*ttaS«£4xXi^j ^}h7ty^^-^ 
Itl/^o £fc, #» 2 ^jEh^fcy^ 
3I«F«T 2Kbps J£/._h. flg 3 Jl^n h ayl^Xfc* I C 
MP (Internet Control Message Protocol) ±CD^=f 
— jS^ff (Echo Reply) * yir— Ws^y b&S 2%P£X 

±*«5S«s;h/c^3j tv^h7ty^-^ 

lx^5 0 f^-3WiEh7t7^^ttit res#« 

ff^JxXt^J i:V^5 by t <y?s<f — ^Sr^LTV^ 

So 

[0025] rrx% fgf 2 o o i&xfmmmm 

2002 — 200 edsiijtsW^tWfti^^^SriftRi- 
6 0 H4J4**Jt©»»c43«tS^ FSE2 0 0 IS 
tfti«SS« 2002 — 2006 ^ii^StM^T^ 
«*fWW*7*/Wl A^)^7 b&t 

iSt^f:*w^7;v^Ttc 7 4)^9 2 0 2 111 A 
ASn^yhSrjES^7^2 0 2 2 > 3&»*7*2 
0 2 6, ^FiE^ 7^20 24(^)3 OCO^ 7 ^C^MBi" 
5o r©7^/^ 20 2 1^T/^lXA|j: 

^-r^o 3EjS^7^2 0 2 2{4f7^h^7^"Cfc 
9. IE^^7^2 0 2 2\C&m£tlt^f7 httjEa* 

*b*o sr^ 7^2026 ic^gsnfc/^ y hi±, m- 

$ks<4-y b7b^fr&nm^%tcft<DffiW%f&<n-V-—s<2 

0 0 0RTf-y~—s<2 0 0 oasiRSSttTV^ L ANSC 
a*-*-***** — 2 0 2 7 ^oftjftSJx, K»#t*<*>1J- 
— /<2 0 0 ORt/t- '<2 0 0 0 c? tltX^^Z) L A 

icoi^X '<2 0 0 OfciBUSUXV^y 

- h=g® 2 ooi osR^r^—oeaiiffwiwiKBttBSw 

'<2 0 0 OWt-^2 0 0 OflSJRS^tlX 
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Rffi&te/H-t-sa*. ±ffi<ommmm 2002-2006 

XII T«oa«*«A»feS«UfceiS*««l»«[«r« 
ffit^o *3E?7 7i2 0 2 4lC^|g$tLfc^^r ^ Ml 
3FjE^ra-2 0 2 5i:o4^n, t-/<gr«t^yh 

*lcMR3*t*. 

[0 0 2 6] j^X. y-Fg!2 0 0 lfttfaflttt* 
2002-200 6 3ft5fiai#«*Jlfi*llfri-5fc«><0. 
70 7 4^9 2 0 2 1 <D5MB7Vl"=*y XAI^oV^Ttt^t 
60 y-hgf2 0 0 l^lfsgt2 0 0 2~2 0 0 
611 SttiiWiSW-A^SttS^XOiiW^y hSr 

S 3 0 0 3 IdioV^X, 7^/^ 2 0 2 111 AJj^thtz 

/<*7 b&^iEi/iy*^* t&$k-rz>i>^m-rz>o ^je 

2 4lC^aStb-5 (^T77°S 3 0 0 4) 0 =F3E->^* 

^"V^au^^oyh^d ^^^s 300 5 dig 
20 btmm^^^^x^^^mx^, ^m-> 

^^-r^scrth\tmm^ 77.2 0 2 e^m^ti 

(^T77 P S 3 006) % -fraU^V^-fr^ttiEffi.^ 7 
^2 0 2 2^i^tia (^^S 3 0 0 7) « ^ CO 

oxeaiw*3fts«iR*ixxm**jxs. 

[0 0 2 7] Rl^ DD o S«*fc»t5#**aw» 
JO S^Wl^^-ro *f> i6^-hi|2 0 0 1^ 
* HftfflW^>»fP*:^i-7i=»— K El 8 

<DiHf 3S« 2002. 2 0 03 ^fiifl««WJR*g^S« 

0 0 1 Xtfiiff fiK 2002 — 2006 CO^FIE F7t'7 
^Hffll»oKfPSr*i-7n— b£rJlV>XDD o S 

[0 0 2 8] m6(D7"ryys 3011 IC^I^X, 
h^!2 0 0 1(l (IS 2) 

40 X, «UIBI»rJB3eS*uXV^J:9*v^lBiij»UT, 
3»tUHfliX*g*StLXV>S WJbcoeiS#aS:«ffl ttv> 

:^h7t^ h7t^i: ux^db^-5o 

^T>7 7 P S30l2CioV^ :LCQ^fcB£;h,/c 

50 b^5c Witf, Hi2(D|S:^^^i/^xiaP^-r5i:, # 
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^irte{dst=192. 168. 1. 1/32, Protocol=TCP, Port=8 

o} tteZo 

10 0 2 9] ^V^T^ *Tiy7S 3 0 1 3 l£*S^T, 

-1^12 0 0 lit, ^r^^sao^icio^TM 

Lfc«S^*ft«r7-f;i/^ 2 0 2 1 (C^^-T^ 0 #: 
l-x W^tO t-/< 2 0 0 0 ^ 2 0 0 0 ^1}JI 

m £ thX V > £ L A N <Off\^\Z. iotf ^IS:^ $ ixfcfi 
3£ttttfflRttlcftS8& h7t^ <^ei£**£r»JPS-r 

6 7c£>cd^=*^- — 2 0 2 7^r^^-T^ 0 7^ib\ B£ /0 

H]4^-r^^J^-r r yW^(l5(C^i-^^>'W^ 2 0 2 

[0 0 3 0] ^Lt, y-h^f 2 00 111 **ry~7 
S30 14m^, ^i/^^-^ ^^tUL^^ 

tfZ: lo_hSE{Cfc£iHf^iE2 0 0 2 N 2 
[&21] 

ft^SERSMSSl-hS s (d+1 r i,kK Ss(d.i), nu(d, 
1200 HZ>#ftrs*Jl*rtOJj«fl[0 t bT5B«Kll*s 

hg!2 0 0 1 ^e>fffi*y^e*c#aE-rs^«r^i- 

PgJf Srd. P3— <Om£. d {C*5\,^TV— bmWt&tc 30 

temm&m*t&w\'rz>%F-%& \ , a tc&5 i t^su 

s s (d, ih s§£ dfc&£ i -eiasij^tt^y- h^gifc 

ffl«3$«*Srnii(d f iK *££dl££><5 i-CBUUSna^ 
^hgtttl«fgI(DlO±«E (»*d+l) lc£> 

3ii«««*:MarSfc»^»**:k, SiSdlcfcS i 

£d + i) «c:fc'Sk"e»Sii$nsifi«3S«co?fe»f»*h 

7 t ^^oe«S**IIISffiSrS s (d+1. i,k) fc-f-So - 40 

ffi22] 

1 

Ss (d + i.uu = nu ( d .i) Ss (d,i) 

M2 0 0 2, 2003 ld»^i-Seai«r«ftlJPfiffl*:* 

tUi'6 e ^-^12 0 0 1^ St^og 
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hgi200 1i^^d = 0t^^ r<O^^d = 0td 
lilO^g^^^^^fe^y— h^|g2 0 0 1<D 

1 1 V— bgiW 2001 <oe5S#««6UISflS<o 
lOJWffiS s (0,1) il #£^JI§ h7t y^«:*Habfci: 

#ou3-Kic»jsufcesiffir«»jisffl["Cfc5o 

teflli: IT, €i£««»JPSffi^8 OOkbpsTfcofc 
^■f-5 0 ^IT, y-hgf2 00 1Pj:2o(?)lo± 
^0111^12 0 0 2, 2 0 0 3as*^£i-,5 fc£>, lo 

it2 0 0 1IClll 1 # g <D 1 o ±«t<Oii« 3£g 2 0 0 
2(OeS6«f«fHRRffiS s (1, 1, l)W2f SOI o±^ 
Oilff 3SB 2 0 0 3 (^eS6«F«»IPfiffl S s (1 . 1 . 2) Jl 
S s (0, 1) = 8 0 0 k b p s £:nu(0, 1) = 2 4 
0 0kbps <h^3 0 

[0031] esi*«»jRn^sfli«o9{ittB 

2 0 0 2. 2 0 0 3<DW}YE*mW-rZ> 0 m8<DXTV7 
S 3 0 2 ll^ioV^, ii{f3£®2 0 0 2. 2 0 0 311 
^hSt2O0 1^i£«Ufc (^f7^S30 14) 

eai*«*jPfifB^srg«-rsc &i-> ^7/5302 

2 JCil^. iHf £E® 2 0 0 2, 2 0 03(1 Sit LTbE 

0 2 UCl^U Sli^^^ + aT/a»*Ji6^4r3/ h 

<Dmmftmnmmiz»&\*itmm*~—2 o 2 7*** 

m5\C^k-f-y ^ 2 0 2 1 (D^mT/^^V X<MCf£o 

[0032] miw&M2 0 0 2n^^^ys 30231c 
*5^T. -to±8StcfeS5i«3£ia2 o 0 4K S iiffSIM 

200 3&*:<D±mdbz>mitmw:2 o 0 5x^2 0 0 
R«^&ff u ufceas»«»WR« t «r*A/*feasw*« 

RJB*«:aflW5. ^(0^:^01^(1 y-h^e 

2 0 0 1 07,f^7 P S 3 0 0 3 ^[pj^tfe^o i"ft:fc> 
Hfgf 2 0 0 2, 20 0 311 ^-h^jg2 0 0 

1 d»fe»«L*:ea6W«fMR«[* 1 oJb«S<Dffl«3£«£: 

SI20 0 2, 2 0 0 3C0t^$ dtilTffe?). 

d = iia*2o<Diaffs«aM¥«EU -toisgoiifs 

20 0 2Wittl, 2#g Oil{f 2 0 0 3 <D i 
2 TfcSo ilff 2 0 0 2 CO^^fRJPIMS s 
(1.1)Rt^51«K«2 0 0 3<Dea6#«*JRRfflS s (1,2) 

ti ^nwy- h«i2 0 0 i t^ea*« 

ftURRfitS s (1,1,1). S s (1, 1,2)-C£>9 N i~^t>h4 0 
0kbps T*fc^) 0 ^LT, il{fgg2 0 0 2 (CJi 1 o 
C0±)5^OiHt^S2 0 0 4^^ffi-r^>fe^, lo±I© 
il«3S«»nu(1.1)ttlT*fcSo iot, ii«SKt2 0 
0 4 <oei£»4E*iJfiBffi S s (2, 1, l)fl Ss(l,1) = 40 
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Okbps £rnu(1,1) = ltMtt4 0 0 k b p s t 
#<5o — Siting 2 0 0 3lCte2oO±fic£Dii<f^ 
12 005, 2 00 6^#^-r^f c ^lO_bfficOil{f^ 
gfeiu(l.2m2T*£>£ 0 ioT, i§{f^g2 0 0 5<D 
RMS S s (2.2,0&r/iHfgEg2 0 0 6<Dfc 
2l»«fHEMtS s (2,2,2)13. Ss(1,2) = 4 0 0 kbp 
s €rnua.2) = 2-CBfcSLLfc2 0 0 kbps £^5 0 
[0 0 3 3] ^ LT. Sft^g 2004 t^iim^© 2 0 
0 2 £><b. iiff ^g 2005. 2006 teiift^g 2 0 
0 3*>fcei£#ttfMKS^S:£«U ii«KB2 0 0 
2. 2 00 3(CfcltS^r>y/S3 0 2 1-S3 0 2 2 
£ l^«^»f^*t" 5 0 iltf SB 2 004-2 00 611 
—fyfT— -f>\>t£ if X 0 lc iiff ft fi ri* * v * £ «l 
&rT*#6fc#>. y^S 302 3f4jEfftftV\ 

[0034] #cic. h^g 2001 Rxfmmmw 2 

002-2006 tO^FIE h 7 t y ^ «SttJB#Ottf£«:tft0! 
-TSo 19^^X7/3 30 3 11^^, h^® 

2 0 0 1 &tfiHf ££g 2002 — 2006 fl DDoS 

tit, h^!2 0 0 1 Wlffgf2 0 0 2- 2 

0 0 612. ^T^7 P S 3 0 3 2I^V^, r.<Of£tb£*L 

fc^IE h 7 t * * *#£r«Sfc-*-»*y y h O iS«5c I P T 
Ku^&^IET K^ftffit LT*W6U ro^FIET K 

00 lWIif^i2 0 0 2~2 0 0 6li x ^yi/S 

3 0 3 3 \C&ls^X ^(D^lEi/y^^-Y^? ^ )V# 2 0 2 

^fjvtm 5 \c^-f-y ^ 2021 (Dftmrsv^ v x 

fl^ZE^^ 2 0 2 4lc#gt£n. jE«*Uffl*36»bO^ 
-CSSi^J* 2 0 2 6{C»«*tt5 0 

[0035] « ±m>w ^tzMm^mm^mm^mM-r 
5 0 m i o »esiffr«iHisHSfl[oiiu^M, mi m 

h^g 2 0 0 1 &T/iI{f i£g 2 00 2-20 0 6(0 

[0036] is i o i^v^-t. m 7 ic^-rajB^eai* 

*fBIRB«, «8*361E2 0 0 7H2Mbp s . ^=£g 
2 0 0 8fah 2Mb p s haH2H§£*L-C*3 
•9, £fc. *ffi3fc3£@2 0 0 9^b6 0 0 kbps. iSS5fc 

^12 o i o^biii ookbps <D&Mm9k*<fry h 
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[0 0 3 7] iiftgB 200411 483tfiB 2 0 0 7^ 
"bA^^^W^y h^jE*^* 2 0 2 4\Z#m 

tt*5i?, a«afsK«2 oo4icA^*ixs^ft*s 

i^7t y^li«S*ft«2 0 0 9j^bS{f£ix£6 0 0 
kbpsffc5 e r*Ul «(J»!oe3l««*JK<0^»IH-C 

§«Lfc€i£#«MMRffl:s s (2, 1, 1) - 4 0 0 k b p s 
J:9*#<^fcaC>. T«Etf>ii«£SB2 o o 2 tell 

MF7ty^4 00 kbps lc#«*JRLTtti*LT 

v>6. sift 3£g 20 0 2ft ±^,<Dmmmm 2004^ 

70 b A;^ £ Jh,S3fc*SSi h7ty^ ©eai#4fi36S 4 0 0k 

aS»**JKttS s(U,1) = 400kbp s^ms 
fc£>. T^^y- h^!2 0 0 1 lcli4 OOkbpsO 

[0 0 3 8] ilff SIB 2 0 0 511 C^g 2 0 

0 8*^A;ft£n£Sfr^y :y hSr^FIE:?^* 2 0 2 4 
iC#^LTV^fc£>. T«^HfKl2 0 0 3ICffi^t 
T^5*^i F7 t y ^Ii0 k b p s T'fe^o £fc. 

5ift^g2 o o 6\cAt}£thz>&m&mh7t 

20 KSI2 0 1 0 2&»b£f& 10 0kbps 

«*JRRffiS s (2.2,2) = 2 0 0 k b p sErF"C*>Srt: 

Tftt<Oii{f££g2 0 0 3KK1 ^WtSlOOkb 
ps(7)Wgil>7ty^^LT^5o ioT.il 
ft §£g 2 0 0 311 ±«Ecr>iHf 3£B 2005. 2006 

a>b a^j stb5?fi[«*gi F7b 7 ^ 

1 o o k b p s t, to«oe5S*«»jPfi<o^im-cg« l 
ytes»JK*jP5ffis s (1,1, 2) -4 o o k b P s siTt 

&5fc#. T4^^- h^i 2 0 0 1 ICli 1 0 0 k b p 
30 s <oa*«ft h7t^ LTV^5 0 

[0 0 3 9] ill ^T^S 3 0 4 1 tCioV^T. ^ 
- hg!2 0 0 111 tD«eS««MIKIIlK^&--36tt 
IW«, ^Jbfflt<Oil«3S« 2002. 2003 \Z^tZ?— 
hi!2 0 0 1 iCA^^tt^^^ h^k y^OTO 
A*eafe««*B8v>-&t>-fr5 0 ^777*3 3 0 

5 1 (C1*5V>T. iiftKB 2002. 2 00 311 ^i^A 

*ea6»*^ra-&**rs«-r5. ^ur. ^r^s3 

0 5 2 {CioV^T. lifBKB 2002. 2 0 0 311 g# 

>0 12 0 0 1 IciiftrTSo 

[0 04 0] ^(-. J^T" y >^S 3 0 4 2 (CioV^Ty— h 
^g 2 0 0 111 ilft^fi 2002, 2003 

mm b 7 tv* ^¥*&A*eai««ttS:s«i-s 0 -r ^> 

<t. ^f'7/S 3 0 4 3^VNT, y-hi!2 0 0 1 
fl S«Ufc^A*«a6»««S:*^»ffiUfe38fc»* 
y h oe5S»«*JI»WaEffiS:*A/^eiS»««iJI® 
PSEffi^*:, ^±«t<OiHf KB 2002. 2003 \zm 

50 (tSBSr«S'Ji-«>^:«)0«^S:^o 
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[§£23] 

Ss' 



(d*l.i.kj 



' B <d«l.i. 



Ss'. 



(d.i) 



*^<OKft*rfll!i:-tS s ' (d+l.i.kh B(d+1.i.kK S 
s' (d, \)<D£ 9(ClS^-r^> e h!7 — ?lC*3^T, 

y- h^g 2001 (D&tEi-zpgm&tommo t urn 
a^^t-pst/Boass&d. i^-ossi* d \z^^xy— h 

i •CKSUS^sy— hMSfcteMiSBOloJLittlc 
ifc£iifI3SBgc£nu(d, i), i££ djc&5 i -CBUUStt 

hmM^tctemm ^so i o±a»cjfc* k -obuu 

«ffiB(d+1, i.k), dlc£>5 i T?SR»JS^y— h 

s ' (d+i,i.k) ro<h#, e%*«n«iiaHit 

fl «TO*-C»ffl$tL6 0 
[^C24] 

B 



(d+l.i,k) 



Ss' 



td+Uk) 



= nu 



2 B 
1=1 



Ss' 



Cd.O 



mm 2002, 2003 jcjg^-rsesiffir^jpfiwssffi 

r*Ul y— hgt2 0 0 1li, ±«ttf>3i 
AKB0%«SK b 9 t * * oT*&A*ea»*OJt* 

#«sjpfiM»ffio«j»ffl[s s • (o, D»fiai*«fHiefl[ 
o^ffis s (o, D tmc-?tbz> 0 
[0041] id i o <Dmmt$mm&m<o»m<Dm*m 

^XmW-tZo y-hgi2 00 K01#@^)lo±^ 
fOiiff3£B2 0 0 2frb7— h££g2 0 0 1 lCA*£Jx 

h7t y^ospi&A^eai^WffiB 0.1.1) 
13 400kbps, 2f 1(^)1 o±8fc0>ii AS8B 2 0 0 

3^e>y- h^®2 o o i^A*Sixsa»**h7t 

s^^¥«A*eas»*«B(i, i.amookbps 
■cfcSo io-c. (t2 4) (o^mcoftm^ ±±ffito 

iffi«KB^fe^¥*A*e5S*«fflo^W^LTV^5 
::<!:£ 9, B(1,U) + B(1,1 1 2) = 5 0 0 kbpsi:I 
tB£*L5 0 eiS»*»JI»WI«E«tf!>taJB«S s • 

(0. 1) = S s (0. 1)-Cfc5fctf>, H]7£>#)J; 9, Ss* 
(0,l)li800 kbps T*£>5 0 S£oT, If |(OlO 

±^(Dmmmm 2002 <o?fe»s» h7t^^ ^eas* 

«©JPfiSaSEfflS s ' (1.1.1)11 B (1. 1, 1) = 4 0 0 k b 
P s Zftm 5 0 0 kbps -C** U fidSflTttMBMS 
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m<DWmm S s ' (0, D = 8 0 0 k b p s £JHS L?c 6 
4 0 k b p s — 2#|(D 1 O±5fE0ilfH^ 

12003 (D&mmm v^^y* <D&m&s&&mmmm 

Ss' (1,1.2)11 B(l,1,2) = 100kbps^f5 

ookbps -c&jiu einsr««iRBisaEffi^«j»ffis 

s * (0. 1) = 8 0 0 k b p s SrJUff l/:160kbps 

[0 0 4 2] ttt, gll l^f^/S 3 0 5 31C*d 
ilff^m2 0 0 2. 2 00 311 y-hg§2 0 
70 0 l^bea»««9BM*B*Srg«"t-5 0 * 
T-y^S 3 0 5 4Mii3K iiffS^B 2 0 0 2. 2 0 0 3 
fl 0 2 7oeS#«»J|ftfl[«rS{tL^e 

Pine * tt a psfisffl ^ c 
tms\CTjki-^ 2021 ©smst^:* y X-mc$£ 

#«*ieS6#«*JPfiWSI«[tcfMH*n6o 

[0 0 4 3] Wc, Hill (O^v^Z 0 5 5^51^, 
9AKB 2 0 0 2 JifflS^*>5ii«3SB 2 004IC 

20 y§RilA3£B 2 0 0 2 |CA^3 Stl5S»*a h7ty^ 

©WlWifiaBttit, MM 2 00 3ttt©±«fc 

*>5I(IM2 0 0 5&tf2 0 0 6 IC^^il{f^g2 0 

«*rBv^-&*>fr6. 9A3&B 2 004-2 00 611 * 
xy^S 3 0 6 1 icio^T, sp^A*eiS#«<oBa^-fr 
^g:ifi"5o t6^^f-77°S 3 0 6 2^^^l/^T, ilff 
=£S 2 0 04H iiftfiK 2 0 0 2(C, iifBSC 2 0 0 

5, 2006H mtumm2oo 3\z.&£<D&mmmb 

? My 9 osp«AAeaS*«fl[*r5i*P-»-5. 
JO [0 0 4 4] ^V^X, ^T'^S 3 0 5 6tC^V^T, il 
fBSIS 2002, 2 0 0 3 H il{f 2 0 0 4 — 20 
0 6*»e>S«Ufc3F*A*fii»#*«[Sr5t«-J-*. 
^, ^T7^S 3 0 5 7lCjoV^T, 5Hf^@2 0 0 2, 

2 0 0 3H s«u^^A^eas»«ffiSra^»au 

{f^S2 0 0 2li^CD_bffiL^feaiim^M2 0 0 4Jd, 

iiAisB2 o 0 3nz<D±.mc3bz>mmmw2 oosr 

TfZ 0 0 6«d2Sflli-5. y— h 

^0 g§2 0 0 1 CO^^^^S 3 0 4 3 ^[H]^"C^5o 

[00 4 5] HI 1 0 CO^«^JPS^CO^(±jcoM^ffiV> 
Tl^^-T^o 2002Wl#|Ol o±«Ol 

«3SB2 0 0 4 (05p*&A*<5aS#«fflB (2.1,1)1*4 0 
OkbpsT'fc^, ioT, ®2 4) <0^3a^5>«: 
H ^±«teoii«^Bd*e>(05p^A*e26»«ffl[o-&W- 
^tTv^5Ii:c^:^ B (2. i. D ^ Hffl[»c*So * 
fc, ilifSB2 0 0 2 0fi£*«1HISHSfl[0«)XHfl[S 
s' (U)sSs' (1.1 t 1)-Cfc-6fc«), ^77^S3 0 
43J:"9, Ss' (1J)li6 4 0kbps"Cfe5, X. o 
50 T, il{f ^B 2 0 0 2(7)lf 0±at<OiS«3SB 2 
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29 

s' (2.1,l)tt« B(2,1,1) = 4 0 0kbps^S40 

okbps -e&g u tem%r®mmm&m<DtoMm s 

s ' (U) = 64 0 kbps Uc6 4 0kbps 

[0 04 61 — 38n ilft^g 2 00 3(^)l#|Ol o_h 
^<^iim^®2 0 0 5*»e>ii«SS«2 0 0 3iCA^)^n 

5^sta hn^ ©¥*A*ea&#*Mt b (2. 2. D 

liOkbps, 2#g(D l o±^tOilftil® 2 0 0 6ri> 
bil<f§£g2 0 0 3lCA***t5ft«»»h7 t 70 
^P*SA^e5i6fflr«fitB (2,2 ( 2)lilOOkbps t>*> 
£ e iot, (&2 4) (D*320#S:tt\ ±±ffi<omiB 

£9, B(2,2. 1)+B(2,2,2) = 1 0 0 k b p s tKttJS 

ti^. 2 0 0 3 0&&»ttMRMM0) 

MlSs' (l.2) = Ss* (U,2)-Cfc5t^ 7f'7 
7 , S 3 04 3i^ Ss' (I,2)|j:l6 0kbpstfc 
£ e ££oT, iSm^©2 0 0 5 0%*8R h7 t y**> 
^f^WlHSfSs' (2.2,1)11, B(2,2, D = 0k 
b p s Zft®: 10 0kbps U CiSffirttMRR 20 

g^wjwffis s ■ d,2) = i eokbps zmni-tz 

Okbpst^O, 3Hf 3£K 2 0 0 6 cD*fc^§t^ h 9 t 
2/ * OfiSI«%$iJP5MSffi Ss' (2, 2, 2) «U B (2, 2, 2) 
= 100kbps £r#S 10 0kbps T*B£@: U tem 
««SyRWKttO«383ffiS s ' (l,2)=160kbps 
3rJ£® Lfc 16 0kbps £&3 e 
[0 0 4 7] ttt, IDl 1 CD 7^:7*3 0 6 3(C^5V^ 

-r , mmmm 2004-200611 int §s@ 200 

2 , 2 0 0 3 d^€iS6#«WRWi*Jg^SrS«i-6 0 * 
■77^3 3 0 6 4^1^, Ilfgf 2 0 04-2 0 0 6 JO 
te, »a-2 0 2 7 0>&&ffttMRfiK«r£{B bfcfi 
3S»*ffiiJR»^lc^*tb5e«»**yRW«ffl^«35i- 

2 0 2 lCO^T/P^yXAKoT 

tteiS»«*JPfiBSS6ffl[{c*JR$ttS. 
[0 0 4 8] — ;£\ ^f7/S3 04 4(Cjo^X, 

hii2 0 0 ilt ±G«>fiS««MRMaEd^&— £tt 
k*<D h U # £r#m-**-5 k , ^t> # fi55l»«n»«:lltT 

t$^f^s 3 0 4 lfrbfcmmmmmmm^mm 

[0 0 4 9] k^X, K±»MUfc»fP«t, WTt-IB 

[0050] ^t, mm%&m^^<Dftw<D-nmmm 

5 0 Hi 2lt *jl*»l«^«mfc-*--5*y H7 — 

fflfifc-Cfc 5 C m 1 2 ic^-f J: 5 i^yh!7- ^ 

M\ McOiilf ^17 0 0 1 iC.toTM^nT^^o 50 
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*LT. ilffigR 7 0 0 1 dte 1 ^£ fc <tj>^- 
fOnyt^-^ 7 0 0 0&&ffi-rZ>Zh&X£Z>£ o 
(C^oTl^o ^-—if^^^b-^ — ^ 7 0 0 O^SS^T* 

^>t°^-* 7 o OO^fUc^T-^ h&iifl** h 
7-*_k<D4rS~- KJc(ft«-rSii«««7 0 0 1 a*JEJfc 

>fc^-* 7 0 0 0luI(t5J:9lct5o 
[0 0 5 1] iI«§g«S>««|Co^T»9ii-<5o 
11311 iiff £R 7 0 0 1 OrtfBOM^^tT'p y 
^1 3M^-TJ;5lc, iiff =g© 7 o 0 l tc 
tttiifMft 7024a, 7024b, 7024c, 702 
4 d^»lttSttT*5 9. ii«IS«7 0 0 l«Cttf>CDil 

§7 0 0 1 JifScO^ol^t^ 7024a — 7024 

dtC^f^Lfc-O^ ^31 — ^^5 7 023a — 7023d 

k, h^^i-Sto^tf 5tL*b<DUi£timn7 

021k, h<oeasoR<oteasifeo«asrie«i- 

56^7-^7 0 2 2^ 7^7-fWyH^ 

(Act i veNetwork Execution Environment) 7 0 10k 

^7 0 1011 rtftfc, TfT^-J^— K {zfu^f^ 
a) ^HfT-r^fc*o=>— KjHr«7 0 l 1 k, T^^ 
<i~7^ — K^fEtSLT^fc^rj — KIS«SfiJ7 0 12 
k«rfltxT^5o ^^-C7^r^7^- Kk 

[0 0 5 2] il 3 ^COilff 

SI7 0 0 1 ©»ff«o«BI«rRW-t-S« 
5i«l£«3&^5i«j»7 0 2 4 d^LW^ h^PJ# 
"T6k, ^y^7x-7*|J7 0 2 3 d^^/^o/ h^- 

sft bteaitesa 7021 teasfesa 7021 

if 7c (source) TKU^k?55fe (destination) 7 
^k«rtt^9, Sbtc-ttte^T KU^Sr^r— kbT 
(Saiifex — ^UEt*ffl7 0 2 2tC|Elt$nT^6^5 l c 

[0 0 5 3] x^>7-.y O«t«0f^#< 2mK>\Cftl-th 

-C«>$»frCc^ KiS*aSjfP7 0 2 lti, h 
^7^7>f^7 h7-^^firi^7 0 1 0iCtt o T 
^7^^y hl7 — ^*f£ltK7 0 1 0td^V>TJi, =i 
— KHfrSB7 Oil WO/^s' h^r§Jt^«9 , ^co^^ 



-16- 



31 

««7o i 2a»&tt*mLTHfrrs 0 =— kh 

fi«70lllt 7^f^^- KS:IH?LfciiS*, £ 
SB 7 0 2 1 K8E UT^OiifH^gtC^t LT^t6 d t 

eas-i-s^t tOT*s»*i:n teaitessfp 7 o 2 1 
a«fttea5feiw»*ufc^ v*^— (702 

3a^7 0 2 3 b^7 0 2 3 c^i:') U > 

?7 = -*n&mi%& (7 0 24 a^7 0 24 b^70 
2 4 eft if) Ir^lWy h«rttoa«aS«lc<EiSSi- 

[0 0 5 4] ftio, £ C T-liii«*| 7 0 2 4 d bT 

[0 0 5 5] ftl^ aflTK.H 7 0 0 1 rtO«526*QfS9l5 7 
0 2 lsftSV^lCU-C^-jr^ MC*f-r<5*a« (T^T^:/ 

[0 0 5 6] **IS*IB*s*«4:-*--6 7 A?7 — ^-e 

6c it(D (^d— /^v) IPTK^Oft^ 

& I £ ^fri" 3 0 ««7G I P7 Kl/^iS 

s -Cfc^Jgjfe I PT KWiftSd ift^^ry h £ 
(s, d) £«fc>1-t>cD£-*-*o £fc, ilff^«cOT^ 

^ U foS^^co^.— *?<DffimirZ> I P T Kw*o*-fr 
$rOi^ft)^ttl) 0 

[0 0 5 7] ±l5#^o^-— if 

^o e -t-ftfc^ 

A= { (s, d) e [ (OXI) U (IXO) ] | s * 
d} 

m^iri>±X(D I PT K^OV^ft^fraSflrTcSfctt 

[0 0 5 8] ^R^-iffciJ^-r^nffltOT^X^^^- 
K*s*>6a«3S« K) lc|&#j$;h,TV>5££, i 

#1 ( 1 £ i £n) = — Ktt, 

(i) (C (i) £A) Idlta/^^h^^rtT-ft 
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r^-f^** M7— *HfT«»n, c (1) u c 

(2) U Uc (n) ft5Sl*-&(OS*-C*> 

(s, d) l£*oTfi»£;h,Sfc©-CS>'K 

[0059] g}14l2. El 1 3 Lfc&iUft^ — 
Ktt»7 0 2 2JC|2lg^ttXV>Ste2l5fex— ^CO— m 

[0060] ii4 ic^-r J: ^ tea&jfc^— "Tvw*. 

t^-T^ (Type) t^7K^ (Destination) £5£ff 
7c7K^ (Source) (Send to) <£>#JgS£r 

*^^£^fcrrt>OT*&9, rr^T^y (Active) j 
£>£V^i (Regular) J cov >"f tb^OffiSr i: 6 0 

(Os^^T *y Y<D^% I P T KU^*5J:t/^t7E I PT KU 

ts^^^vMisa^^amseo i p t K^«fet 

[0 0 6 1] 94~7<Ofei£ *T?*r<<<7\ XlbZ^^ V 

=*—b**mii-rz>mm*&f)>thx^z> 0 9*<7<om& 

50 I PT Ki/^^t^ 

[0 0 6 2] 114 ic^i-^^— ^ucoffiUcfev^ 

565feTKU-^dS ri. 2. 3. 4 j j^if 
TC/KU^^ r A ny (|pJT?t>J:V^ j t) , «Si365fe 

a* rr^x-f kaj t4otv^ fl 

tc7 K^^V^67 F^tfcott), ^55feT Ku 

ri. 2. 3. 4j id-^^-rs^i-te, i^^-r 

^ Tt^t^^J T*^t)> ^7K^^ rio. 5 
0. 0 : 0 J •C*>«9 > mmiZT Ti i. 12. 

13. 14J <Ei£5te3&S rT^T"W^^ — KBj 

so rr^T^^j r**>t9, ^7K^^ r A ny 
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(fpj-CfcJ:^) J X&><9. aiTcTKl/X^ Ti5 7. 
2. 3. OJ fci£5fcri* Tt^^h'^^-KCJ 

^■CfeoTk SSftTcT K^:*** T 1 5 7. 2. 3. 

oj ic-rv^-rzm&ia-xm^-rzstiry h y 

[0 0 6 3] 1 4 (C^fct 0 IC. ^5fe^^ ^ 

10 0 6 4] ^JbE^P^Uyciim^®0^^^^^^ 0 

/D^yA^t^o tsataysawi mmm*> 

"To 

[0065] TfrmmmtctertzTfTsfy^— 

*l£>fC, -CO-fe^roL y T^C^vVWl ^Hfl^tfM >^ 
[0 0 6 6] mi 5 11 ll^t^^yf^^f^^:^ 50 
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5 K:fc^T, $$-i§- 7 0 5 1 1*3-— if A 0 a— -fJfcfcS 
f, 7 0 6 1 nmMfm (Certification Authority ) g 

g-C£>5o -OSMEJSofittgfl ^(0«||lcJ:oT^ 

£;ft£t>0"C*£>o-Ct>&V>U £><5V^ISP (Intern 
et Service Provider, ^ ^ hJgigH— b*^$^ 

*b\ M 1 5 Id^i-ffilT-tt, A-if^^gg 7 0 5 1 <0 I 
PTKl^te ri. 2. 3. 4j T'fcSo ^Ttli, a 
— 1fA^ N T^x^y^— KA^ilffil@7 0 0 1 (C^ 

T. 3.— if Af2T^^;/3 — KACOlS^T^oT^ 

^^3- KA&3.-ifAriSA#U -fctbSriHf 3£« 7 

0 0 ncfifttst^-ctAv^ 

[0 0 6 7] ( 1 ) X^i~X o IC % 3— if Acoa— 

■!f**afill7 0 5 111 «fc!S«&J8^T«a>^7i-ft 

*>%4iBMiiaMp«t«:**-rs. ^tt (2) x^-r 

X 5 a— if *g*3£« 7 0 5 111 ±^fefifcS*Lfc4* 
Hli«rBIEAtta7 0 6 llcafttio ^©it, IBflE 
7 0 6 1 ft, a— if ag^^g 7051COIPTK 

m^<oiy<Dt, A-ifA«r»sij-rs*:«)offlfai:. a— 

f»i!7 0 5 lOI Ti. 2. 3. 4j 

dS«EA3»7 0 6 ltci2«£*L5o 
[0 0 6 8] ^JC (3) -C^i-«tpiC, a— ifJBsfeaSil 
7 0 5 111 ±T*^$i^fc^ii^^V^TT^v 1 ^^ 

= - KA^*^-»*-f-6«!3at<T5. *tt (4) 

-r j: p ^.-if wmat 705111 w&mvm& * 

nfcT^^^y^— KA^riiWSJt 7 0 0 1 

[0 0 6 9] rtb^rSi^Tilff SB 7 00 111 ( 5 ) 

if A<0«^gEn*«rlKIEJRaS1K7 0 6 l a»felMW~5 0 
rcom^-UE^#{C^, A-ifASr«giJ-r-5W«li x ^(D 
IP7K^ Ti. 2. 3. 4j i:, ±co (2) ^c^oV^ 

(6) T-^ct P Kl. iiftKB 7 0 0 1 fl ±12com^- 
IEP^^^^ , 9l±ibfcA--ifAco^^^ffiV^T. Jico 
(4) [^^TM$ii/:7^7^/^- KACom^^- 

tt, af8«l7 0 0 1(4, 7^7^7'^-KA^7^r 

[0 0 7 0] ^±5, ^CO (1) lo£Xf (2) CO^^n 
bixT- if A<04*M«asSMEJ13Stt7 0 6 1 JC^ 

3— If «|5fe3SJ| 7 0 5 itt-t<o^BMi^*| 

^t^)«i^V^T7^7^^ya-^V^<Ot* 

taiASfi 7 0 0 1 \z&mirZ) z t h^Jmx^>^ 0 
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[0071] o£ v % mmmm. 7001 
&m v wib*^** * nit y n >/ 9 ^ ossse v \ 

[0 0 7 2] iTRWUfcilftSSia^oT^T 1 ^ 
2 SB 1 offals LT, a— if^ifoa 

mmm. (y— k) i:r^7^=- K*:s»i-*xtf^ 

- K) Ict^t^^- KSrCft-t-mf J:v^^st>d^d 
[0 0 7 3] ftl^ ^*<^»^^o^i?)<o#J^^p^^:ov^Ttt 

w-r*. ^^»3i{f^g (y-K) tc*5v^. nior^ 

f^^-K«i$nTi3^ i#@ (l^i^n) 
i: j US (l £ j £n) COT^^^^^— Kds, ^fh^f 
thM&c (i) (c (i) c A ) tm^tc (j) (C 
(j) ca) \zm-rz>'<tr*y htztt-rz>i><DX-$>Zkfe 

*S*LTV^i#, (c (i) Oc (j) ) 

-fr-Cttftv^ J; 5 * i *3 £tf j <Dm&>&& (lit i * j ) 30 
\z hi&m £ ti z> «£ o ttfemfiVifrfrx V ^ £ *g-c*> 6 o 

[oo74] $g i <o*m<omm<D*/ir y a-wt, ? v 

(s, d) £§§LT\ 

(seo (k) Adeo (l) ) A (k* l) 
XhZtzM^^ 

(s, d) G C (i) He (j) 40 

b*zm&izm-rz>h<Dxhz>o iiu o (k) tsxit 

O (l) Wt. ttl^ti^— f-'k *5j:t^l laoT^f^ 

( s , d) as§iJ*Lfc»^-Cfc5 0 rc9£ 

[0 0 7 5] o£ 9 % te^x-^Jc^^$nT^6 JO 
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T K^^^<pjx*txtV^^^ixTV>^>^l(Onivh y — 
j&sfiJ-Cfc cfcV^ $tLTV^^20xy h y — <ha^l£;h, 

[0 0 7 6] Z.<D£o\Z^ mmfc<D^—V<DT^^^y 

DoS (^ffc^DoS, Distributed Denial of Servic 
e ) &&&&5m-r ^tSi^l^l^i 

[0077] m2(D3-m(DMffi<vi/-rv*iL &>%'<>r 

yb (s, d) tcKLTil/B^S^t 2o^±07^ 

-£i^\<^t^zLbti,z> 0 r. b\c£y, a.— ifas£r r 

[0 0 7 81 W:, ^*T-t:ai^J:9i7^7^y 
yy v^-i ^ g y©«|tov^RBt5. ii6jt L 

i n u x JL<£> Java fi8^'>y ( J V 

M) Sr^v^TT^-r^y^^ hco^S^tTPiim^B 

[0 0 7 9] mi 6 (C^i-^J-Cfi, ITffiCD IP^^y^ 
Ir^l (process) (O— ffi t LTti LTV^5 C -tulC 

^tr^ (7^7^7^7h!7-^^) 

J;3l-LTV^^ 0 ^fc, m{c:#V^ x t>—*)V (kerne 
I) rtco I P^^ ^/MCjS 

/<^r ^/h^^^^^y 1 i bpcap ^ril LT Java 

[0 0 8 0] felO- as^r UT#I^Ufcir^O I P^^ 

•CcO^^^tC^^^-r^ I P7K^ I PT 

KU^> jS^Itc I PT ^>6V^fi•^ttbOM^ 
it) ms^^Ki, HfflB*Ji-ejeB6StL6r^ 
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y h»^<Dii*0/^y MS, #-^/W;:*5lt3 I 

IS.- 7>f :/7 5J 1 i b n e t SriILTi£ffi£ix5 e ^ ? 

[0 0 8 1 ] mm<01 a v a (3ftffi«Q WAP 

£ Tjava. security J ^rffi^6C £ «fc o"C*fe^3. y ^ 

-< ^yuSrW >^ y * >-^—> a v-r* - t *s^JI6-e*> 

W«Ofcfc<OTB*£ LTtt fx. 5 0 9J BEMt»^ 

IPTV'U**: rx. 5 0 9J O^iJ^ (DN. distin 
guished name) £fllC^£>6 ~ t lC «fc *) . *Hifc7gl|g 

[0 0 8 2] ftib\ JiE'O'^ 

^tiLrv^5o tit, ±^bfc-aio^s. i-sfct? 

^«r#B L * b T * ^ >r ^ y h *3 J; t5iffl«^^ 

m±x<dt * 7^7^- K©e» t zcDj&m^mn^. 

mm£tLtis<tr*y b<D*y b 9 — ? ^<Dmm?£ ¥<0&%i 

vfzL-^^tt^ttjuriitT-rSw Victor, jbiEM. 

[0 0 8 3] /«£3o, ±3i6Ufc^=»>t°aL-^^n>/y A 

9, a«3S««n^***ttfccpu (fMUtti) a* 

ROM, CD-ROM^<D^M&ti^ ^ >-t°zx — ^ 

^^^•y (RAM) WJ: 9 IC* — £B#IIB:A3^7A*r« 
[0 0 8 4] £fc, JLE^n^-Mi, rW^o^^A 
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[0 0 8 5] iil^n^-M^ JKftfcbfcflSteO 

6l»77>f^ (m#7*W7J*) T*)oTt)AV>o 

[0086] ^fc, T«soy- h8«£fci±iif&ssaa» 
[0087] £fc. ^@&wim ss«fi^— h *> 

I P7 Ku*£J*offigc<0ii« y — KtfooT^^V^o 
20 [0 0 8 8] £Ub x HffiSr#fiaUTw<^|SWomfe?KlB 

[0 0 8 9] 

?fe*#<oji«a$ia^ d d o s ^^co^^o^^ h7ty 

30 teW-tZ^kfr^mtte*), DDoS**»#©t-tr 

[0090] ^fc, 4ojnoe»«««m^j:dfts*« 
m i ] ^m<DMm<onm^mmx^ ^ h 17— 

[H 2 ] nXlk<o»tt(c J:5ftV#H«kUft#<oK£ 
[0 3] ^loMia^^FIh7t yf&mikft 
[H3 4 ] f^^OJT^IdJzay— hilg2 0 0 l^U^ 

50 mmmm2 002-200 6^mK.^>mmmm^^x 
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[gi 5] mmm<D]&m\z£z>7>c'i'* 202 nc&v 
I is 7 ] Piiijs<o?g«R^ «t £ m 1 ©**ic*i»t seat 

[ID 8] KHJS0JKJ»lcJ:5ii«3S«2 0 0 2. 2 0 

[ID 9] lR)IIJ60^ffiJcJ:5y- hmW2 0 0 1M 
iilH^H2 0 0 2 — 2 0 0 6 (D^flE h7t ^^^ttS^O 

[0101 Wl*lfco»lBlc:J:5Hio««»c*5lt5fi 

imiii mnm<DMm\z£z>v- hit2 o o i& 

t/ilff^g 2002-2006 60eiHfflF*S>JPHS<OS^^ 

Kui 2] mnmoMm&nrf-ezzTfTrj 
[mi 3i mmmnMm&mft-czzTtTjzf*? 

V y-t J: safMS«rt«©*j«*r*-r^n y * IDT* 

[mi 4i mmM<oMm*mftx-zz>T*7 L '{zf*iy 

[mi 5] ^Wl^T^67^f>f^7 
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[mi 6i mmM&j&m&mnx-zzTfT^zf** 

hy- ^GQiiff^gSrL i n u x±OJ a v a (g^f£ 
M) <Rfflh^»' (JVM) ^lV^7^T^^>5ry h 

2 0 OO-t-^ 
2 0 0 i -y- 

2002 — 200 6-SHt3£« 
/0 2007 — 2010 •♦•^Tj^g© 
2 0 2 1 — :7^/U^ 
2 0 2 2-- jEm^7^ 
2 0 2 3 - * jE#1^ — 
2 0 2 4— ^jE^* 
2 0 2 — 
2 0 2 6-*R*7* 
2 0 2 7 -••S^= 5 r^ — 

7 0 0 o-^-t'o=iytv-^ 

7 0 0 1 — ii« 3£B 

20 701 o — r^^-r by—?nrrm$i 

7 0 11 -=a— KSHTtt 

7 0 1 2 -a— KlEttSP 

7 0 2 1 -g^lSi 

7 0 2 2 — (Ka^te? 1 — ^/WlSttSHJ 

7 0 2 3 a. 7 0 2 3 b--fy^7x-7,f(5 

7 0 2 4 a % 7024 b"-iHf^ 

7 0 5 1 -a.— -ff«*K« 

7 0 6 1 •••SBSE«S£fB 



[mil 



[me] 



2QQ7 — frn 



2009 




2008— [□} 



DDoSB»€ 



2010— {□}- 









) 






2004 


2o()2 








; 







2003 



W)-!> LAN 





S^gSghTfc^ffi S301 1 



I 



I 



-S3012 



-S3013 



-S3014 
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[02] 



[1213] 













{ Dst = 1 92. 1 6a 1 . 1 /32Prcnocol= TCP.Pon = 80 } 


500 kbps 




2 


{ Dst = 1 92. 1 68. 1 .2/32 .Protocol <= UDP} 


300 kbps 


108> 


3 


{Dst=192.168-1.0/24) 


1 Mbps 


20 



IIEU] 







1 


T1 Kbcs iyj:<7)/^^K^ 

si i£ja±j£e5stian-a , g> 


2 


T2 Kbcs U_tc£ ICMP/Echo Reply / fcr:/ 

S2 ®utmfc£m^nTx\2> 


3 


S3 ^>ULt3©sn^nr^^ 



20M 



7<W 



2022 



IBS _^ 



2023 



2026 



2027 



2024 



2025 



[■51 




2007 



2009 ^-{rn 



2008 



2010 — [r~i 



SBI|) 



[17] 




LAN 



i=1 
k=1 



1)=400kbps 

i 2001 2(XK) 



k=1 



-1) 



k=2 






(lr*> 




k=2 




SsCUU2)=400kbps, 
Ss(2,2,1)=200kbps / / Ss(0, 1)^800hbps 



D 



2006 
d=2 



2003 
Ss(2,2.2)=200kbps 



d=1 



d=0 



[i8] 



c 



-S3021 



-S3022 



-S3023 



[IU9] 

C a* ) 



I ^jEh?^v^tb~| -^S3031 



[^^m^J— S3032 
S3033 



T 
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im 1 0] 



2007— {O 



2009 



2008 




5-n* 



2010 p} 



[mil] 



2004-2006 : a<SgB(i^) 
S3061 



_T_ 



S3062^ 



$3063^- 













BP 



S3064- 



2002. 2 003: ffllg ggOHM 
( H>Q 

1 /-S3051 



2001: 



S3041- 
S3052 



S3042- 
W-S3053 



Struts 



S3043-4 
-S3054 

S3044- 

/-S3055 



IE 



huaraeai I 
I 



C«5 



] -S3056 

— S3057 
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li 2] 




11 3] 



7010 



(Active Network Execution Environment) 7012 



T 



7021 



7011 



13 



7024. 



7023^''^ 



1 P^<^Z3-HA I 

I ~po = t~< yp— K B 1 
1 y^7^-KC I 



7001 



7022 
✓7023a 



7023b 



7023c 



7024e 



7024b 



_ 7024c 



[mi 4] 



V 



(Type) 


{Destination) 


(Source) 


(Send to) 


(Active) 


1.2.3.4 


Any 


P^^-f^n-KA 




1O.5O.0.0 


11.12.13.14 






Any 


157.2.3.0 




(Regular) 


1.2.0.0 


N/A 


29.15.20.1 


a* 


11.20.0.0 


N/A 


109.1.1.10 




199.1.1.0 


N/A 


1200.0.1 
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[HI 5] 



7061 

<2> itfaasss 




*2 
^ i 
S3rn>o 



( I P12.3.4S9B&B 



(4) awsaiep? 





( I P 1 2.3.4&ftt 



IP 



7051 :3-*fW^SIS CH-tfA) 
I P 1 2.3.4 



7001 : »B»B 



II 6] 




t}—*Jit (kernel) 













i jni 




JN. 




| libpcap 


i 




libnet 





[I 



>Vr+j VW& , 
(packet capture) *■ 



(copy of Incoming 



3=5 



j (data link) 



aMft/T**h 
{regular packets) 



]} 



disable routing 
(ip Jorward=Q) 



Oncoming packets) 



(outgoing packets) 



F 9 — A 5K030 GA13 GA15 HA08 HB08 HB14 

KA06 KX24 KX30 LC15 MD08 

5K033 AA05 AA08 CB06 CB08 DAI 5 

DB19 EA07 



(72)^^# W± t 
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